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CLAIMS 

1. A data prooesslng mei:liod for processing so tliat: 
a portable device moantlng an Integrated circuit storing 
key data for dividing and first area management key data 
wiilcti Is authorized to perform at least one of a write 
operation of data to a memory area of said Integrated , 
circuit and a rewrite operation of data to the memory 
area on tlie condition that the first area management key 
data Is used makes a second service provider provide a 
service using part of said memoxry area of said Integrated 
circuit when said portable device Is Issued by a first 
service provider providing a service using said memory 
area, 

said data processing method comprising the 

steps of : 

having a memory area operation unit managing 
said key data for dividing encrypt first module data 
Including second area management key data by the key data 
for dividing and provide the same to the first service 
provider; 

having the issuer of the portable device which 
is said first service provider, encrypt second module 
data including the encrypted first module by using said 
first area management key data and provide the same to 
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said memoxy area operat:±on unit; and. 

under the control of the memory area operation 
unit, providing the encrypted second module data to the 
Integrated circuit, decrypting the second module data by 
5 using the first area management key data In the 

Integrated circuity decrypting the first module data In 
the decrypted second module by using the Icey data for 
dividing, and dividing the memoiry area to a first memory 
O area to be used for service of the first service provider 

^ 10 and a second memory area to be used for service of the 

second service provider by using the second area 
management key data obtained by the decrypting. 

2. A data processing method as set forth In claim 
1, further comprising the step of having the integrated 

15 circuit divide the meroozry area Into the first memory area 
wherein at least one of a write operation of data and a 
rewrite operation of data is authorized on the condition 
that the first area management key data is used and the 
second memory area wherein at least one of a write 

20 operation of data and a rewrite operation of data is 
authorized on the condition that the second area 
management key data is used. 

3. A data processing method as set forth in claim 
1, further comprising x 

25 having the Integrated circuit further store 
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first system key data and autliorize at least one of a 
write operation of data to tlie memory area and a rewrite 
operation of data in the memory area on the condition the 
first system key data and the first area management key 
data are used; 

having the memory area operation unit encrypt 
first module data further including second system key 
data by the key data for dividing and provide the same to 
the first service provider; 

having the first service provider encrypt 
second module data including the encrypted first module 
and division condition information indicating the 
condition for dividing the memory area for use by another 
service provider by using the first area management key 
data and provide it to the memory area operation unit; 
and 

having the integrated circuit decrypt the 
second module data by using the first €irea management key 
data, decrypt the first module data in the decrypted 
second module by using the key data for dividing, and 
divide the memory area by using the second system key 
data, second area management key data, and division 
condition Information obtained by the decrypting. 

4, A data processing method as set forth in claim 
1, further comprising 
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providing a memory area division apparatus for 
dividing said memory area to said second service provider 
under the control of said memory area operation unit and 

liaving said memory area division apparatus 
provide said encrypted second module data to said 
Integrated circuit. 

5. A data processing method as set forth in claim 
2, when a plurality of third memory areas can be defined 
in said second memory area and third area management key 
data used for performing at least one of a write 
operation of data to the third memoxy area and a rewrite 
operation of data in the third memory area is defined for 
each of said plurality of third memory areas, 

further comprising the steps of having 

said memory area operation unit encrypt third 
area management key data by second area management key 
data and provide the same to said memory area division 
app€u:atus ; 

having said memory area division apparatus 
provide said encrypted third area management key data to 
said integrated circuit: and 

having said integrated circuit decrypt said 
encrypted third area management key data by using said 
second area management key data, establish correspondence 
with said third memory areas defined in said second 
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memory area to store said th±rd area management key data 
obtained by said decrypting. 

6, A data processing method as set forth in claim 
5, further comprising the step: 

having said memory area operation unit assign a 
service code for identifying a service provided by using 
the third memory area for each of said third memozy areas 
and generate and store an area code list indicating an 
area code for identifying said third memory area, said 
third area management key data corresponding to the third 
memory area, and said service code assigned to the third 
memory area in correspondence. 

7. A data processing method as set forth in claim 
3, further comprising the steps of s 

providing a memozry area division apparatus for 
dividing said memory area to said second service provider 
under the control of said memory area operation unit; 

having said memory area division apparatus 
provide said encrypted second module data to said 
integrated circuit; 

having said memory area operation unit provide 
first degenerate key data obtained by encr3n?ting by using 
said second system key data and said second area 
management key data to said memory area division 
apparatus ; 
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having said Integrated circuit generate second 
degenerate key data by encrypting by using said second 
system key data obtained by decrypting and said second 
area management key data; and 

performing mutual autbentlcatlon between said 
memory area division apparatus and said Integrated 
circuit by using said first degenerate key data and said 
second degenerate key data. 

8 . A data processing method as set forth in claim 
6, further comprising the steps ofs 

having said memory area operation unit 

provide an operation file registration 
apparatus to said second service provider, 

provide said third area management key data to 
said operation file registration apparatus, and 

establish correspondence between said service 
code in said area code list and said area code to provide 
the same to said operation file registration apparatus; 

having said operation file registration 
apparatus store file registration permission data 
Indicating said sexrvice code and file management key data 
issued by said second service provider In correspondence, 
encrypt said file registration permission data by using 
said third area management key data, and provide the same 
to said integrated circuit; and 
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having said Integrated o±j?ou±t decrypt said 
file registration permission data by using said tlilrd 
area management key data and write file data relating to 
a service of said second service provider to said third 
memory area by using said file management key data in 
said decrypted file registration permission data. 

9. A data processing method as set forth in claim 
4, further comprising the steps of, 

when there are a plurality of said first 
service providers, and said first system management key 
data and a system code for identifying said first service 
provider are added to each of said plurality of first 
sezrvice providers, 

having said memory area operation unit 
receive rejection information for specifying a 
party for which provision of services from respective 
service providers by using the same integrated circuit is 
rejected from said first service provider and said second 
service provider, 

generate a registerable system code list 
indicating said system code added to said first seznrioe 
provider capable of providing a service by said same 
integrated circuit as said second service provider based 
on said rejection information, and 

provide the registerable system code list to 
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sa±d memory area d±v±s±on apparatus; and 

liavlng said memory area d±v±8±on appara-tns 
Judge wlxether or not to divide said memory area of the 
integrated oirouit based on said system code stored in 
the Integrated circuit and said reglsterable system code 
list before dividing said memory area of said Integrated 
circuit • 

10. A data processing method as set forth in claim 
1, further comprising the step of having said memory area 
operation unit pay a fee for using said second memory 
area of said Integrated circuit to said first service 
provider, 

11. A data processing method as set forth in claim 
1, further comprising the step of having said second 
service provider pay a fee for using said second memory 
area of said Integrated circuit to said memory area 
operation unit. 

12. A data processing method as set forth in claim 
1, wherein said portable device is a card. 

13. A data processing system for processing so that 
a portable device mounting an Integrated circuit storing 
key data for dividing and first area management key data 
which is authorized to perform at least one of a write 
operation of data to a memory area of said Integrated 
circuit and a rewrite operation of data to the memory 
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area on tlie Gond±i:±on that the first area management key 
data ±s used makes a second service provider provide a 
service using part of said memory area of said Integrated 
circuit when issued by a first service provider providing 
a service using said memory area, wherein the system has 

a memory area operation processing apparatus 
used by a memory area operation unit which manages the 
key data for dividing, 

a first service provider processing apparatus 
used by the Issuer of the portable device which is the 
first service provider, and 

a second service provider processing apparatus 
used by the first service provider; 

wherein ; 

the memory area operation processing apparatus 
encocypts first module data Including second area 
management key data by the key data for dividing and 
sends the same to the first service provider processing 
apparatus ; 

the first service provider processing apparatus 
encrypts second module data Including the received 
encrypted first module by using the first area management 
key data and sends the same to the memory area operation 
processing appeuratus; 

the memory area operation processing apparatus 
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provides the received encrypted second module data to tlie 
integrated circuit; and 

ttie integrated circuit decrypts tlie second 
module data by using the first area management key data^ 
decrypts the first module data JLn the decrypted second 
module by using the key data for dividing, aind divides 
the memory eirea to a first memory area to be used for 
service of the first service provider and a second memory 
area to be used for service of the second service 
provider by using the second area management key data 
obtained by the decrypting under control of the memory 
area operation unit* 

14, A data processing system as set forth in claim 
13, wherein said integrated circuit divides said memory 
area to said first memory area wherein at least one of a 
write operation of data and a rewrite operation of data 
is authorized on the condition that said first area 
management key data and said second memory area are used 
wherein at least one of a write operation of data and a 
rewrite operation of data is authorized on the condition 
that said second area management key data is used. 

15 • A data processing system as set forth in claim 
13, wherein: 

said integrated circuit further stores first 
system key data and authorizes at least one of a write 
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operation of data to said memory area and a rewrite 
operation of data in the memory area on the condition 
that said first system key data and said first area 
management key data are used; 

said memory area operation processing apparatus 
encrypts first module data further Including second 
system key data by said key data for dividing and 
provides the same to a first service provider processing 
apparatus ; 

said first service provider processing 
apparatus encrypts second module data Including said 
encrypted first module and division condition information 
indicating conditions of dividing said memory area for 
use of other service providers and provides it to said 
meraoiry area operation unit processing appEiratus; and 

said integrated circuit decrypts said second 
module data by using said first area msmagement key data, 
decrypts said first module data in the decrypted second 
module by using said key data for dividing, and divides 
said memory area by using said second system key data, 
second area management key data, and said division 
condition information obtained by the decrypting. 

16. A portable device mounting an integrated 
circuit used for a first service provider providing a 
service, wherein the integrated circuit comprises: 
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^ a memory means for storing key data for 

dividing managed by a memory area operation unit 
performing processing to make a seoond service provider 
provide a service using a part of a memory area of the 
integrated olrouit and first area management key data; 

an input means for Inputting a module including 
seoond area management key data Issued by the memory area 
operation unit which is encrypted by the memory area 
operation unit by using the key data for dividing and 
furthermore encrypted by the first service provider by 
using the first area management key data; and 

a processing means for decrypting the input 
module by using the key data for dividing and the first 
area management key data, dividing a memory area of the 
memory means to a first memory area and a second memory 
area by using the second area management key data in the 
decrypted module, authorizing at least one of a write 
operation of data to the first memory area and a rewrite 
operation of data in the memory area on the condition 
that the first area management key data is used and 
authorizing at least one of a write operation of data to 
the second memoxry area and a rewrite operation of data in 
the memory area on the condition that the second area 
management key data is used. 

17. A portable device as set forth in claim 16, 
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whexeXn sa±d processing means authorizes a wr±t:e 
operation of a file used for processing of the processing 
means in said first memory area on the condition that 
said first area management key data Is used and 
authorizes a write operation of a file used for 
processing of the processing means in said second memory 
area on the condition that said second area management 
key data is used* 

18. A portable device as set forth in claim 16, 
wherein : 

said memory means further stores first system 

key data; 

said input means receives as input said module 
further Including second system key data; and 

said processing meeuis uses said second system 
key data and said second area management key data in said 
decrypted module to divide the memory area of said memory 
means to said first memory area and said second memory 
area, authorizes at least one of a write operation of 
data to said first memory area or a rewrite operation of 
data in the memory area on the condition that said first 
system key data and said first area management key data 
are used, and authorizes at least one of a write 
operation of data to said second memory area or a rewrite 
operation of data in the memory area on the condition 
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that saxd seoond system key data and said second area 
management key data are used. 

19. A data processing apparatus £or processing so 
that a portable device mounting an Integrated circuit 
storing distribution key data, a system code for 
Identifying a first service provider, and. first area 
management key data which Is authorized t:o perform at 
least one of a write operation of data to a memory area 
of said Integrated circuit and a rewrite operation of 
data to the memory area on the condition that the first 
area management key data is used makes a seoond service 
provider provide a service using part of said memory area 
of said integrated circuit when Issued by a first service 
provider providing a first sei:vice using said memory 
area , wherein 

the apparatus has a memory means, processing 
means, £uid input/output means; 

the memory means stores rejection information 
for specifying a service provider which can provide 
service by the same integrated circuit Indicated by the 
first service provider and the second service provider; 

the processing means encrypts a first module 
including second management key data by using the key 
data for dividing; 

the input/output means outputs the encrypted 



flrsl: module -to provide It to the first service provider, 
receives as Input: a second module Including the encrypted 
first module and encrypted In the first service provider 
by using the first area management key data, and outputs 
the second module to provide It to a memozr/ area division 
apparatus for dividing the memory area under control of 
the second service provider so that a part of the memory 
area of the Integrated circuit can be used by the second 
seirvlce provider; 

the processing means generates a regis terable 
system code list Indicating the system code added to the 
first service provider which can provide service by the 
same Integrated circuit as the second service provider 
based on the rejection Information; and 

the Input/output means outputs the system code 
list to provide It to the memory area division apparatus. 

20. A data processing apparatus as set forth In 
claim 19, wherein 

when said memory area division apparatus 
divides said memory area of said Integrated circuit to 
said first memory area wherein at least one of a write 
operation of data and a rewrite operation of data Is 
authorized on the condition that said first area 
management Key data Is used and said second memory area 
wherein at least one of a write operation of data and a 
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j?ewi:±te operation of data is authorized on the condition 
that said second area management key data is used; 

said processing means defines a plurality of 
memory areas in said second memory area, issues third 
area management key data used for performing at least one 
of a write operation of data to the third memory area and 
a rewrite operation of data in said third memory area for 
each of said plurality of third memory areas and encrypts 
the third area management key data by said second area 
management key data; and 

said input/output means outputs said encrypted 
third area msuiagement key data to provide it to said 
memory area division apparatus. 

21. A data processing apparatus as set forth in 
claim 20, wherein said processing means issues a service 
code for identifying a service provided by using the 
third memory area for each of said third memory areas and 
generates an area code list indicating an area code for 
identifying said third memory areas, said third area 
management data corresponding to the third memory area, 
and said service code assigned to the third memory area 
in correspondence; and 

said memory means stores said area code list. 

22. A data processing apparatus as set forth in 
claim 21, wherein said input/output means establishes 
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ooirirespondenoe between sa±(i area code ±noluded In saL±d 
area code list: and said service code and outputs tlie same 
to provide It to a file registration apparatus for 
writing file data used for a service of said second 
service provider In said tlxlrd memory area of said 
Integrated circuit. 

23. A data processing apparatus for processing so 
tliat a portable device mounting an Integrated circuit 
storing distribution key data, a system code for 
Identifying a first service provider, and first area 
management key data whlcb Is authorized to perform at 
least one of a wirlte operation of data to a memory area 
of said Integrated circuit and a rewrite operation of 
data to tbe memory area on tbe condition that the first 
area management key data Is used makes a second service 
provider provide a service using part of said memory area 
of said Integrated circuit when issued by a first service 
provider providing a first service using said memory 
area, wherein 

the apparatus has a memory means, input /output 
means, and processing means; 

the memory means stores a module Including 
second area management key data Issued by a memory area 
operation unit for managing processing of the data 
processing apparatus and encrypted by the memory area 
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opera1:lon unJ.t by using tUe key dalza for dividing and a 
reglsterable system code list Indicating the system code 
added to the first sexrvloe provider whloh can provide 
service by the same Integrated circuit as the second 
5 service provider; 

the Input/output means receives as Input the 
system code from the Integrated circuit; and 

the processing means outputs the module to the 

•H . 

O integrated circuit via the input/output means when it 

O 

5 g 

^ 10 judges that the input system code is indicated in the 

reglsterable system code list. 
. 24. A data processing apparatus for performing 

processing to write file data In a second memory area of 

S 

^ an integrated circuit having a first memory area wherein 

■ 

m 15 at least one of a write operation and rewrite operation 

of file data used for providing a first service is 
authorized on the condition that first area management 
key data is used and a second memory area wherein at 
least one of a write operation and rewrite operation of 
20 file data used for providing a second service is 

authorized on the condition that second area management 
key data Is used, 

when a plurality of third memory areas are 
defined in the second memory area, third memory 
25 management key data used for performing at least one of a 
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write operation of data to a tliird memory area and a 
rewrite operation of data in tlie third memory area is 
defined for each of the plurality of third memory areas, 
and said integrated circuit stores said third area 
management key data; comprising, 

said data processing apparatus, comprising $ 

a memory means storing third area management 
data and file key data which is issued by the second 
service provider, used at the time of writing the file 
data to a third memory area, and encrypted by the third 
area management key data; 

an output means for outputting the encrypted 
file key data to the integrated circuit; and 

a writing means for writing file data to be 
used for providing the second service to the second 
memory area of the integrated circuit by using the file 
key data. 

25- A portable unit issuing method comprising the 
steps of: 

issuing a portable unit mounting an integrated 
circuit storing key data for dividing and first area 
management key data and authorizing at least one of a 
write operation of data to a memory area in said 
integrated circuit and a rewrite operation of data in the 
memory area on the condition that the first area 
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management key data ±s used and 

requesting a memory area operation unit 
managing tlie key data for dividing to divide the memory 
area of the Integrated circuit to a first memory area 
wherein at least one of a write operation of data and re- 
write data In the memory area Is authorized on the 
condition that the first area management key data Is used 
and a second memory area wherein at least one of a write 
operation of data and a rewrite operation of data In the 
memory area Is authorized on the condition that the 
second area management key data Is used by using the key 
data for dividing. 

26. A method of Issuing a portable unit as set 
forth in claim 25, wherein said portable unit is a card. 

27* A program for making a computer execute 
processing so that a portable device mounting an 
Integrated circuit storing key data for dividing, a 
system code for identifying a first service provider, and 
first area management key data which is authorized to 
perform at least one of a write operation of data to a 
memory area of said Integrated circuit and a rewrite 
operation of data to the memory area on the condition 
that the first area management key data is used makes a 
second service provider provide a service using part of 
said memory area of said integrated circuit when Issued 
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by a first se3?vloo provider providing a first service 
using said memory €a:ea, comprising making the computer 
execute 

a routine for receiving as input the system 
code from the integrated circuit; 

a routine for referring to a registerable 
system code list indicating the system code given to the 
first service provider which can provide a service by the 
same integrated circuit as the second seirvice provider 
and judging whether the input system code is indicated in 
the registerable system code list; and 

a routine for outputting to the integrated 
circuit a module including second area management data 
issued by a memory area operation unit managing execution 
of the program and encrypted by the memory area operation 
unit by using the key data for dividing and further 
encrypted by the first sexrvice provider by using the 
first area management key data when judging that the 
input system code is indicated in the registerable system 
code list. 

28. A data processing method for processing so that 
a portable device mounting an integrated circuit storing 
distribution key data, a system code for identifying a 
first service provider, and first area management key 
data which is authorized to perform at least one of a 
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write operation of data to a memory area of said 
Integrated circuit and a rewrite operation of data to the 
memory area on tlxe condition tliat tlie first area 
management key data is used maJces a second service 
provider provide a service using part of said memory area 
of said Integrated circuit when Issued by a first service 
provider providing a first service using said memory 
area , comprls Ing s 

a routine of inputting the system code from the 
Integrated circuit; 

a routine of referring to a regis terable system 
code list indicating the system code given to the first 
service provider which can provide seirvioe by the same 
integrated circuit as the second service provider and 
:)udglng whether the input system code is indicated in the 
registerabXe system code list; and 

a routine of output ting to the Integrated 
circuit a module including second area management data 
issued by a memory area operation unit managing execution 
of the program and encrypted by the memory area operation 
unit by usdLng the key data for dividing auid further 
encrypted by the first service provider by using the 
first area management key data when it Judges that the 
input system code is indicated in the registerable system 
code list. 
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29. A program for making a computer execute 
processing for wrltdLng file data to a second memory area 
of an Integrated circuit having a first memory area 
wherein at least one of a write operation and rewrite 
operation of file data used for providing a first service 
Is authorized on the condition that first area management 
key data Is used and a second memory area wherein at 
least one of a write operation and rewrite operation of 
file data used for providing a second service is 
authorized on the condition that second area management 
key data is used, comprising making the computer execute 

a routine of outputting to the integrated 
circuit file key data which is issued by a second service 
provider, used at the time of writing the file data in a 
third memory area, and encrypted by a third area 
management data when a plurality of third memory areas 
are defined in the second memory area, a third memory 
management key data used for performing at least one of a 
write operation of data to a third memory area and a 
rewrite operation of data In the third memory area is 
defined for each of the plurality of third memory areas, 
and the integrated circuit stores the third area 
management key data and 

a routine of writing file data used for 
providing the second service in the second memory area of 
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tHe Integrated olrouit by using the file key data. 

30. A data processing method for performing 
processing for writing file data to a second memoxry area 
of an integrated circuit having a first memoiry area 
wherein at least one of a write operation and rewrite 
operation of file data used for providing a first service 
is authorized on the condition that first area management 
key data is used and a second memory area wherein at 
least one of a write operation and rewrite operation of 
file data used for providing a second service is 
authorized on the condition that second area management 
key data is used, comprising 

a routine of outputting to the integrated 
circuit file key data which is Issued by a second service 
provider, used at the time of writing the file data in a 
third memory area, and encrypted by a third area 
management data when a plurality of third memory areas 
are defined in the second memory area, a third memory 
management key data used for performing at least one of a 
write operation of data to a thdLrd memory area and a 
rewrite operation of data in the third memory area is 
defined for each of the plurality of third memory areas, 
and the integrated circuit stores the third area 
management key data and 

a routine of writing file data used for 
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providing the second sezrvlce in the second memory 
the integrated circuit by using the file key data. 



